Re: Password age

From: Joe Richards [MVP] (humorexpress_at_hotmail.com)
Date: 07/26/05


Date: Mon, 25 Jul 2005 22:07:29 -0400

I would expect it is one of several things.

1. You didn't change it in the default domain policy.
2. It didn't properly replicate.
3. The users are logging into local accounts, not domain accounts.
4. The users are incorrect.

The first thing I would do is look at the user account in AD to verify the
password age. Then I would watch them do the logon. If you verify it, then I
would start chasing the other things.

--
Joe Richards Microsoft MVP Windows Server Directory Services
www.joeware.net
Rick wrote:
> Hi, 
> 
> i set in domain security policy the maximum password age to 180 days in 
> june.  I still have users complaints that the system is asking to change 
> their password after 1 month or so 
> 
> any ideas ?? 
> 
> Richard  


Relevant Pages

  • AD 2003 password expiration/complexity question
    ... if my domain policy says maximum password age is zero days (passwords never ... expire) and i change it to an arbitrary number, say 10, and all accounts are ...
    (microsoft.public.windows.server.active_directory)
  • Re: Logon Message (Password)
    ... Sounds like there is a maximum password age ... set in either the local or domain policy. ... > Logon Message ... > I have only two accounts, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Default Domain Policy - Password Chg 90 days
    ... There are certain accounts that have ... The default domain policy has maximum password age under computer ... user - it is NOT being done through local GPOs. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Password Expiration Question
    ... Password Age policy setting is enabled or not. ... attribute up to the current date for all accounts. ... This gives you some control over which accounts expire when. ...
    (microsoft.public.windows.server.security)
  • Re: Password age on user accounts on local computers
    ... even though everything you have here is about password age. ... > on local computers using vbscript or .net? ... I've found many examples> how to retrieve the password age of active directory user accounts, but> nothing on local computer user accounts. ...
    (microsoft.public.win2000.security)